Recently Updated Pages
High availability
A Knocknoc deployment has three parts: the Server (web app), its Database (PostgreSQL), and one o...
Create groups
Groups in Knocknoc map users to Knocs, and a user can belong to multiple groups. To create a grou...
Additional client IP addresses
Capturing additional client IP addresses A client may exhibit behavior where multiple IP addresse...
Redirecting Users
Knocknoc supports a couple of ways to redirect users to and from Knocknoc, which can be useful fo...
Admins
Admins in Knocknoc can log in to /admin on their Knocknoc server, however they can't be granted A...
Grant and revoke process
What triggers a grant or revoke The granting and revoking of access by Knocknoc occurs on a numbe...
Settings
The Settings page lets administrators configure authentication, server options, threat intelligen...
Manage user sessions
Invalidating sessions from the admin portal You can sign users or admins out in bulk from the adm...
Agentic Access and Companions
Knocknoc normally grants access to the single IP a user authenticates from. Agentic Access and Co...
Click to grant/revoke
For additional security and temporal access control, Knocs support a "click to grant" and "click ...
TOTP per Knoc
For additional security and identity verification, Knocs support a "Require TOTP code when access...
Grant duration
Users are assigned a default "grant period" (in minutes), either within Knocknoc for local users,...
Proxmox VE
Knocknoc integrates with Proxmox VE to dynamically control network access using the built-in Prox...
Error Codes
Agent Error Codes Palo Alto 200000 - Target Firewall Not Connected to Panorama 200050 - Username ...
CFL102 - Cloudflare List Lookup Failed
Agent error code #CFL102 indicates that the Knocknoc backend tried to resolve the configured Clou...
CFL101 - Cloudflare List Not Found
Agent error code #CFL101 indicates that the Knocknoc backend is configured with a Cloudflare list...
CFL100 - Cloudflare List Not Configured
Agent error code #CFL100 indicates that the Knocknoc Cloudflare Lists backend has neither a List ...
Manual Access
Default deny is the best way to live. However sometimes you need to manually grant access for a n...
Knocker - a cli helper
The Knocker utility is a command-line tool for managing various backends or server features with ...
Nginx
Knocknoc can drive an nginx server's allow/deny list directly from the agent, without a wrapper s...